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1 This action is in response to the communication filed on 7/1/2005. 

2 DETAILED ACTION 

3 Continued Examination Under 3 7 CFR LI 14 

4 A request for continued examination under 37 CFR 1.114, including the fee set forth in 

5 37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 

6 eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 . 1 7(e) 

7 has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 

8 37 CFR 1.114. Applicant's submission filed on 7/1/2005 has been entered. 

9 Response to Arguments 

10 Applicants' arguments filed 7/1/2005 have been fully considered but they are not 

1 1 persuasive. Applicants argues primarily that: 

12 a. Gafken and Hasbun do not disclose comparing the similarity of the update portion 

13 with the protected partition. 

14 b. Gafken and Hasbun did not disclose locking a protected partition in a hard drive. 

15 c. Schneier did not teach storing the random password in a database at the server. 

16 Regarding applicants' argument a. that Gafken and Hasbun do not disclose comparing the 

1 7 similarity of the update portion with the protected partition, the examiner has considered the 

1 8 argument and does not find the argument persuasive. Hasbun clearly teaches that the update file 

19 contains objects and the BIOS is searched for previous versions of the object (See Hasbun Col. 

20 12 Line 59 - Col. 13 Line 17. Also see Col. 13 Line 18 - Col. 16 Line 27). This required a 

21 comparison of similarity in order to determine whether the object already existed. As such, the 

22 examiner does not find the argument persuasive. 



Application/Control Number: 09/841,503 Page 3 

Art Unit: 2131 



1 Regarding applicants' argument b. that Gafken and Hasbun do not disclose locking a 

2 protected partition in a hard drive, the examiner has considered the argument and does not find 

3 the argument persuasive. Gafken disclosed locking the blocks of data after modification was 

4 performed (See Gafken Col. 13 Paragraph 9 - Col. 14 Paragraph 1). Furthermore, as discussed 

5 below in the rejection of claim 1 under 35 USC 103(a), it was well known in the art that a hard 

6 drive could be used in place of flash memory to store information including a BIOS. As such, it 

7 would have been obvious to replace the flash memory of Gafken and Hasbun with a partition on 

8 a hard drive. As such, the examiner does not find the argument persuasive. 

9 Applicants' argument c. has been considered but is moot in view of the new ground(s) of 

10 rejection. See below. 

1 1 All rejections and objections not specifically set forth below have been withdrawn. 

12 Claims 1-30 have been examined, and claims 31-36 have been cancelled. 

1 3 Claim Rejections - 35 USC §112 
14 

15 The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

1 6 The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 

1 7 subject matter which the applicant regards as his invention. 
18 

19 Claims 1-30 are rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite for 

20 failing to particularly point out and distinctly claim the subject matter which applicant regards as 

2 1 the invention. 

22 The term "similar" in claims 1, 11, 13, and 26 is a relative term which renders the claim 

23 indefinite. The term "similar" is not defined by the claim, the specification does not provide a 

24 standard for ascertaining the requisite degree, and one of ordinary skill in the art would not be 



1 
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1 reasonably apprised of the scope of the invention. One of ordinary skill in the art would be 

2 unable to determine how alike the information in the protected partition and the portion of 

3 information stored in the update file would need to be in order to be considered "similar" to each 

4 other. As such, the ordinary person skilled in the art would be unable to determine the scope of 

5 the claim. Therefore, claims 1-30 are rejected for failing to particularly point out and distinctly 

6 claim the subject matter which the applicants regard as the invention, 

7 Claim Rejections - 35 USC §103 

8 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

9 obviousness rejections set forth in this Office action: 

10 A patent may not be obtained though the invention is not identically disclosed or described as set forth 

1 1 in section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 

1 2 are such that the subject matter as a whole would have been obvious at the time the invention was made to a 

1 3 person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived 

14 by the manner in which the invention was made. 

15 

16 Claims 1- 4,13-19, and 26-28 are rejected under 35 U.S.C. 103(a) as being unpatentable 

17 over Gafken (US Patent Number 6,026,016), and further in view of Hasbun et al. (U.S. Patent 

18 Number 6,088,759) hereinafter referred to as Hasbun. 

19 Regarding claim 1, Gafken disclosed a method for updating a protected partition within a 

20 hard drive of a computing system, wherein said method comprises (See Gafken Fig. 5): starting 

21 execution of an initialization program in a processor within said computing system in response to 

22 turning on electrical power within said computing system (See Gafken Col. 3 Paragraph 2 Lines 

23 1-4); determining whether an update partition file is stored in non- volatile storage (See Gafken 

24 Col. 5 Paragraph 5) within said computing system for subsequently updating said protected 

25 partition (See Gafken Col. 13 Paragraphs 4 and 7); after determining that said update partition is 

26 stored within said computing system for updating said protected partition, writing a portion of 
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1 said update partition file to said protected partition (See Gafken Col. 13 Paragraph 8); and 

2 locking said protected partition to prevent further modification of information stored within said 

3 protected partition (See Gafken Col. 13 Paragraph 9 - Col. 14 Paragraph 1), but failed to disclose 

4 overwriting similar parts and appending new parts. 

5 Hasbun teaches that a bios update can be allocated into virtual blocks so that the blocks 

6 can be updated individually without having to erase the entire memory first (See Hasbun Col. 5 

7 Paragraph 6 - Col. 6 Paragraph 2 and Col. 12 Line 59 - Col. 16 Line 27). Hasbun also teaches 

8 that new blocks should be allocated from existing free memory (See Hasbun Col. 7 Paragraph 2). 

9 It would have been obvious to the ordinary person skilled in the art at the time of 

10 invention to employ the teachings of Hasbun to the bios updating system of Gafken by updating 

1 1 each update part one at a time. This would have been obvious because the ordinary person 

12 skilled in the art would have been motivated to provide a safe method for updating a bios without 

13 risking loss of the entire bios in the event of a power failure. 

14 Furthermore, it was well know at the time of the invention that a hard drive could be used 

15 in place of flash memory, even to store a BIOS. As such, it would have been obvious to the 

16 ordinary person skilled in the art at the time of invention to employ what was well known in the 

17 art at the time of invention in the BIOS system of Gafken and Hasbun by storing the BIOS in a 

18 hard drive instead of a flash memory. This would have been obvious because the ordinary 

19 person skilled in the art would have been motivated to provide greater storage capacity for the 

20 BIOS and to make updating the BIOS fast and efficient. 

21 Regarding claim 13, the combination of Gafken and Hasbun disclosed a method for 

22 updating a protected partition within a hard drive of a client computing system, wherein said 
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1 method comprises: generating an update partition file within a server (See Gafken Col. 12 

2 Paragraph 7 - Col. 13 paragraph 1, wherein it was inherent that the server created the image by 

3 signing it in order for the server to be verified through digital signatures); transferring said 

4 update partition file from said server to said client computing system (See Gafken Col. 12 

5 Paragraph 5); storing said update partition file in non-volatile storage within said client 

6 computing system (See Gafken Col. 5 Paragraph 5); starting execution of an initialization 

7 program in a processor within said client computing system in response to turning on electrical 

8 power within said client computing system (See Gafken Col. 3 Paragraph 2 Lines 1-4); 

9 determining that said update partition file is stored in non- volatile storage within said client 

10 computing system (See Gafken Col. 13 Paragraphs 4 and 7); writing a portion of said update 

1 1 partition file to said protected partition (See Gafken Col. 13 Paragraph 8); and locking said 

12 protected partition to prevent further modification of information stored within said protected 

13 partition (See Gafken Col. 13 Paragraph 9 - Col. 14 Paragraph 1). The combination of Gafken 

14 and Hasbun further disclosed comparing information stored in said protected partition with 

1 5 information within said update partition file; when a matching portion of said information stored 

16 in said protected partition is found to be similar to said entry, said matching portion is 

17 overwritten with said entry if space around said matching portion is sufficient, and when a 

18 matching portion of said information stored in said protected partition is not found to be similar 

19 to said entry, said entry is appended to said information stored in said protected partition if space 

20 within said protected partition is sufficient (See the rejection of claim 1 above). 

21 Claim 26 recites a computer system comprising: a processor executing an initialization 

22 program in response to power being turned on in said computer program (See Gafken Fig. 1 
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1 Element 1 10); a hard drive having a protected partition blocked during execution of an 

2 initialization program to prevent changing information stored within said protected partition (See 

3 Fig. 1 Element 130); non-volatile storage storing an update partition data structure for modifying 

4 contents of said protected partition and said initialization program, wherein said initialization 

5 program executing within said processor determines that said update partition data structure is 

6 stored in said non- volatile storage, writes a portion of said update partition data structure to said 

7 protected partition, and locks said protected partition to prevent further modification of 

8 information stored within said protected partition (See rejection of claim 1 above). The 

9 combination of Gafken and Hasbun further disclosed comparing information stored in said 

10 protected partition with information within said update partition file; when a matching portion of 

1 1 said information stored in said protected partition is found to be similar to said entry, said 

12 matching portion is overwritten with said entry if space around said matching portion is 

13 sufficient, and when a matching portion of said information stored in said protected partition is 

14 not found to be similar to said entry, said entry is appended to said information stored in said 

15 protected partition if space within said protected partition is sufficient (See the rejection of claim 

16 1 above). 

17 Regarding claims 2, 17, and 27, the combination of Gafken and Hasbun disclosed that a 

18 flag bit is set in non-volatile storage within said computing system when said update partition 

19 file is stored at a predetermined location in non- volatile storage within said computing system 

20 (See Gafken Col. 13 Paragraphs 3-4), and determining whether said update partition is stored 

21 within said computing system for updating said protected partition is performed by determining 

22 whether said flag bit is set (See Gafken Col. 13 Paragraph 7 and Fig. 5 Step 550). 
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1 Regarding claims 3, 18, and 28, the combination of Gafken and Hasbun disclosed that 

2 after determining that said update partition file is stored within said computing system for 

3 updating said protected partition, verifying whether said update partition file has been generated 

4 by a trusted server system, and said portion of said update partition is written to said protected 

5 partition only following verification that said update partition file has been generated by a trusted 

6 server system (See Gafken Col. 12 Paragraph 6 - Col, 13 Paragraph 1 and Figure 6). 

7 Regarding claim 4, the combination of Gafken and Hasbun disclosed that verification that 

8 said update partition file has been generated by said trusted server system includes: forming a 

9 first message digest by applying a hash algorithm to a portion of said update partition file; 

10 forming a second message digest by decrypting a digital signature within said update partition 

1 1 file using a public key of said trusted server system; and determining that said first and second 

12 message digests are identical (See Gafken Col. 12 Paragraph 7 Line 10 - Col. 13 Line 2). 

13 Regarding claim 14, the combination of Gafken and Hasbun disclosed that the update 

14 partition file is transferred from said server to said client computing system by means of 

1 5 electrical signals transmitted through a public switched telephone network (See Gafken Col 4 

16 Paragraph 7 wherein it was inherent that the update file was received through the wireless 

17 transmitter, and therefore through a public switched telephone network). 



18 Regarding claim 15, the combination of Gafken and Hasbun disclosed that update 

19 partition file is transferred from said server to said client computing system by means of 

20 electrical signals transmitted over a local area network (See Gafken Col. 12 Paragraph 5). 

21 Regarding claim 16, the combination of Gafken and Hasbun disclosed that transferring 

22 said update partition file from said server to said client computing system includes: writing said 
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1 update partition file to a removable computer readable medium from said server; transporting 

2 said removable computer readable medium from said sever to said client computing system; and 

3 reading said update partition file from said removable computer readable medium into said client 

4 computing system (See Gafken Col. 12 Paragraph 5 wherein it was inherent that the image was 

5 stored to a floppy disk and retrieved from the floppy disk in order for the image to have been 

6 obtained through a floppy drive). 

7 Regarding claim 19, the combination of Gafken and Hasbun disclosed the use of digital 

8 signatures to verify the origin of the update file (See Gafken Col. 12 Paragraph 7 - Col. 13 

9 Paragraph 1). 

10 Claims 5, 6, 20-21, and 33 are rejected under 35 U.S.C. 103(a) as being unpatentable 

1 1 over the combination of Gafken and Hasbun as applied to claims 3 and 18 above, and further in 

12 view of Menezes et al. ("Handbook of Applied Cryptography") hereinafter referred to as 

13 Menezes. 

14 Regarding claims 5 and 20, the combination of Gafken and Hasbun disclosed the use of 

15 digital signatures, including public and private keys, in order to verify that a valid server 

16 generated the boot image (See Gafken Col. 12 Paragraph 7 - Col. 13 Paragraph 1), but the 

17 combination of Gafken and Hasbun failed to disclose the use of a password in the signature. 

18 However, the combination of Gafken and Hasbun did disclose the use of password challenges. 

19 Menezes teaches that providing a sequence number (password), stored and updated at 

20 both a receiver and a sender, in a digital signature of the sender, protects the signature against 

21 replay attacks (See Menezes Page 399 Section (ii). 
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1 It would have been obvious to the ordinary person skilled in the art at the time of 

2 invention to employ the teachings of Menezes to the validation signatures of the combination of 

3 Gafken and Hasbun by providing a sequence number in the signature of the update image. This 

4 would have been obvious because the ordinary person skilled in the art would have been 

5 motivated to provide protection against illicitly signed updates. 

6 Regarding claims 6 and 21, the combination of Gafken, Hasbun, and Menezes disclosed 

7 that the data includes said version of said setup password appended to a portion of said update 

8 partition file (See rejection of claim 5 above), said algorithm is a hash algorithm generating a 

9 message digest (See Gafken Col. 12 Paragraph 7 - Col. 13 Paragraph 1), and verifying that said 

10 update partition file has been generated by said trusted server system includes applying said hash 

1 1 algorithm to said setup password stored within said computing system appended to a portion of 

12 said update partition file to generate a first version of a message digest and comparing said first 

13 version of said message digest with a second version of said message digest obtained by signing 

14 said encrypted portion of said update partition file (See Gafken Col. 12 Paragraph 7 - Col. 13 

15 Paragraph 1). 

16 Claims 7, 8, 1 1, 22, 23, and 29 are rejected under 35 U.S.C. 103(a) as being unpatentable 

17 over the combination of Gafken and Hasbun as applied to claims 1,13, and 28 above, and further 

1 8 in view of Hayashi et al. (US 2001/003965 1 Al) hereinafter referred to as Hayashi. 

19 Regarding claims 7, 22, and 29, the combination of Gafken and Hasbun disclosed 

20 digitally signing the update file and verifying the signature prior to updating the partition (See 

21 Gafken Col. 12 Paragraph 7 - Col. 13 Paragraph 1), but the combination of Gafken and Hasbun 
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1 failed to disclose encrypting portions of the file separately and verifying each portion 

2 individually. 

3 Hayashi teaches a method for providing a variety of software safely by breaking the file 

4 into pieces and decrypting each piece separately (See Hayashi Page 1 Col. 2 Paragraphs 3-10). 

5 It would have been obvious to the ordinary person skilled in the art at the time of 

6 invention to employ the teachings of Hayashi to the updating system of the combination of 

7 Gafken and Hasbun by encrypting parts of the file separately from the other parts. This would 

8 have been obvious because the ordinary person skilled in the art would have been motivated to 

9 provide users with customized software without imposing too much of a load on the provider. In 

10 this combination, it would also be obvious that each block contained information to be stored in 

1 1 a different location from the other blocks. This would have been obvious because the ordinary 

12 person skilled in the art would have been motivated not perform unnecessary computation during 

13 the update. 

14 Regarding claim 8, the combination of Gafken, Hasbun, and Hayashi disclosed forming a 

15 first message digest by applying a hash algorithm to said entry, and forming a second message 

16 digest by signing said encrypted element associated with said entry using a public key of said 

17 trusted server system, and determining that said first and second message digests are identical 

18 (See Gafken Col. 12 Paragraph 7 Line 10 - Col. 13 Line 2). 

19 Regarding claim 1 1, the combination of Gafken, Hasbun, and Hayashi disclosed that 

20 information stored in said protected partition is compared to each entry in said plurality of entries 

21 within said update partition, when a matching portion of said information stored in said protected 

22 partition is found to be similar to said entry, said matching portion is overwritten with said entry 
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1 if space around said matching portion is sufficient, and when a matching portion of said 

2 information stored in said protected partition is not found to be similar to said entry, said entry is 

3 appended to said information stored in said protected partition if space within said protected 

4 partition is sufficient (See the rejection of claim 1 above). 

5 Regarding claim 23, the combination of Gafken, Hasbun, and Hayashi disclosed that each 

6 encrypted element is formed in said server by applying a hash algorithm to said entry, forming a 

7 first message digest, and by signing said first message digest with a private key of said server; 

8 and verification that said entry has been generated by said server includes forming a second 

9 message digest by applying a hash algorithm to said entry, forming a third message digest by 

10 signing said encrypted element associated with said entry using a public key of said server, and 

1 1 determining that said second and third message digests are identical (See Gafken Col. 12 

12 Paragraph 7 Line 10 - Col. 13 Line 2). 

13 Claims 9, 10, 24-25, 30-32, and 34-35 are rejected under 35 U.S.C. 103(a) as being 

14 unpatentable over the combination of Gafken, Hasbun, and Hayashi as applied to claims 7, 22 

15 and 29 above, and further in view of Menezes. 

16 Regarding claim 9, Gafken, Hasbun and Hayashi disclosed the use of digital signatures, 

17 including public and private keys, in order to verify that a valid server generated the boot image 

18 parts (See Gafken Col. 12 Paragraph 7 - Col. 13 Paragraph 1), but Gafken, Hasbun, and Hayashi 

19 did not disclose the use of a password in the signature. However, Gafken, Hasbun and Hayashi 

20 did disclose the use of password challenges (See Gafken Col. 12 Paragraph 7 - Col. 13 

21 Paragraph 1). 
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1 Menezes teaches that providing a sequence number (password), stored and updated at 

2 both a receiver and a sender, in a digital signature of the sender, protects the signature against 

3 replay attacks (See Menezes Page 399 Section (ii). 

4 It would have been obvious to the ordinary person skilled in the art at the time of 

5 invention to employ the teachings of Menezes to the validation signatures of the combination of 

6 Gafken and Hasbun by providing a sequence number in the signature of the update image. This 

7 would have been obvious because the ordinary person skilled in the art would have been 

8 motivated to provide protection against illicitly signed updates. 

9 Regarding claim 10, the combination of Gafken, Hasbun, Hayashi, and Menezes 

10 disclosed that the data includes said version of said setup password appended to a said entry (See 

1 1 rejection of claim 5 above), said algorithm is a hash algorithm generating a message digest, and 

12 verifying that said entry has been generated by said trusted server system includes applying said 

13 hash algorithm to said setup password stored within said computing system appended said entry 

14 to generate a first version of a message digest and comparing said first version of said message 

15 digest with a second version of said message digest obtained by signing said encrypted element 

16 (See Gafken Col. 12 Paragraph 7 - Col. 13 Paragraph 1). 

17 Regarding claim 24, the combination of Gafken, Hasbun, Hayashi, and Menezes 

1 8 disclosed that a setup password is stored in non- volatile storage within said client computing 

19 system; a copy of said setup password is stored in a database accessed by said Server (See 

20 rejection of claim 5 above); said encrypted element of said update partition file is prepared in 

21 said server by signing, with a private key of said server, a result of the application of an 

22 algorithm to data including said copy of said setup password', and verification within said client 
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1 computing system that said entry has been generated by said server includes signing said 

2 encrypted element associated with said entry with said public key of said server (See Gafken 

3 Col. 12 Paragraph 7 - Col. 13 Paragraph 1). 

4 Claim 25 is rejected for the same reasons as claim 10 above as applied to claim 24 above. 

5 Regarding claim 30, the combination of Gafken, Hasbun, Hayashi, and Menezes 

6 disclosed that the non-volatile storage additionally stores a setup password, and each said 

7 encrypted element includes a digital signature signed by said trusted server system, wherein said 

8 digital signature is formed by applying a hash algorithm to an entry associated with said 

9 encrypted element to form a message digest and by signing said message digest with a private 

10 key of said trusted server system (See Gafken Col. 12 Paragraph 7 - Col. 13 Paragraph 1). 

1 1 Claim 12 is rejected under 35 U.S.C. 103(a) as being unpatentable over the combination 

12 of Gafken and Hasbun as applied to claim 1 above, and further in view of Schmidt (U.S. Patent 

13 Number 5,826,015). 

14 The combination of Gafken and Hasbun disclosed a secure bios updating system (See 

15 rejection of claim 1 above) but failed to disclose requiring a user to input a password to unlock 

16 the bios write capabilities. However, Gafken and Hasbun did disclose the use of password 

17 challenges (See Gafken Col. 12 Paragraph 7 - Col. 13 Paragraph 1). 

18 Schmidt teaches that in order to remotely upgrade a bios, an administrator password 

19 should be provided in order to unlock the partition (See Schmidt Fig. 9 and abstract). 

20 It would have been obvious to the ordinary person skilled in the art at the time of 

21 invention to employ the teachings of Schmidt to the bios updating system of Gafken by requiring 

22 a correct password to be entered in order to unlock the bios altering capabilities. This would 
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1 have been obvious because the ordinary person skilled in the art would have been motivated to 

2 protect the current bios from accidental or illicit alterations. 

3 Conclusion 

4 Claims 1-30 have been rejected, and claims 31-36 have been cancelled. 

5 The prior art made of record and not relied upon is considered pertinent to applicant's 

6 disclosure. 

7 i. Arnold et al. (US Patent Number 5. 128.995) disclosed a system in which a 

8 BIOS was stored in a locked portion of a Hard Drive in order to update the BIOS 

9 more easily. 

10 ii. Harmer (US Patent Number 5,835,760) disclosed a system which stores a 

1 1 BIOS in a Hard Drive and searches for portions in the BIOS to update. 

12 iii. Zinger et al. (US Patent Number 6,836,847) disclosed that a Hard Drive 

13 could be used in place of Flash Memory. 
14 

1 5 Any inquiry concerning this communication or earlier communications from the 

16 examiner should be directed to Matthew T. Henning whose telephone number is (571) 272-3790. 

17 The examiner can normally be reached on M-F 8-4. 

1 8 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

19 supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 

20 organization where this application or proceeding is assigned is 571-273-8300. 
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1 Information regarding the status of an application may be obtained from the Patent 

2 Application Information Retrieval (PAIR) system. Status information for published applications 

3 may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 

4 applications is available through Private PAIR only. For more information about the PAIR 

5 system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 

6 system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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